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IN THE CLAIMS 

Please amend the claims as indicated: 

1. (currently amended) A method for managing a secure network boot of a server blade, 
the server blade being in a blade chassis that has multiple server blades, the blade chassis 
including a switching means allowing the server blade to communicate with a network, the 
method comprising: 

storing a list of trusted management servers in a management module on a server blade: 
broadcasting a Dynamic Host Configuration Protocol (DHCP') DISCOVER request to a 

network of DHCP servers: 

broadcasting a requ e ot for a boot program from a server blad e to a network of 

manag e ment s e rvers; 

receiving, at a switching means associated with the server blade, a DHCP OFFER 
message that is responsive to the DHCP DISCOVER request, wherein the DHCP OFFER 
message contains Internet Protocol (IP) addresses of responding DHCP servers, a Dynamic IP 
address with lease information, and a list of Pre^boot eXecution Environment (PXE) Boot 
Servers that can be contacted by the server blade to download a boot program, and wherein the 
DHCP OFFER comes from a responding DHCP server on the network of DHCP servers; 

rec e iving a response to the request for the boot program at a switching m e ans associat e d 
with th e s e rv e r - blad e , th e response b e ing from a responding manag e ment server on the n e twork 
ofH - nanagomont oorvora, the r e opono e oontaining - dir e ctions to a boot program server; 

comparing an identity of the responding [[management]] DHCP server with the list of 
trusted [[management]] DHCP servers in the management module on the server blade : and 

[[upon]] in response to verifying that the responding [[management]] DHCP server is on 
the list of trusted [[management]] DHCP servers, transmitting the r e sponse from the responding 
manag e m e nt server to th e s e w e r blad e permitting the DHCP OFFER message to pass through to 
the server blade via an Ethernet switch that is coupled to the server blade, and downloading a 
boot program from a boot program server specified by the responding [[management]] DHCP 
server. 
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2. (currently amended) The method of claim 1, further comprising: 

[[upon]] in response to determining that the responding [[management]] DHCP server is 
not on the list of trusted [[management]] DHCP servers, blocking the transmittal of the response 
from the responding [[management]] DHCP server through the Ethernet switch t o the server 
blade. 

3. (currently amended) The method of claim 2, further comprising: 

[[upon]] in response to determining that the responding [[management]] DHCP server is 
not on the list of trusted [[management]] DHCP servers, generating an alert to a designated 
administrator server of a presence of an unauthorized [[management]] DHCP server on the 
network of [[management]] DHCP servers. 

4. (cancelled) 

5. (currently amended) The method of claim [[4]] 1, wherein the comparing otep io 
perform e d by - configuring th e Eth e rnet switch to p e rform Lay e r 3 packet filtering to id e ntify Pre 
boot Bx e oution Environment/BootDtrap Protocol (PXE/BootP) traffic, wh e rein Loyer 3 is-a - 
notwork layer of tho oov e n lavoro of tho Op cm Svotem Intoroonnootion (OST) modol wherein none 
of the steps described in claim 1 causes any code changes to firmware in the server blade . 

6. (original) The method of claim 1, further comprising: 

upon detennining that the responding management server is not on the list of trusted 
management servers, downloading a boot program from a known trusted boot server in a secure 
local area network (LAN). 

7. (original) The method of claim 1, further comprising: 

managing different types of boot program servers available to the server blade by 
maintaining, in an information technology services organization logically oriented between the 
different types of boot program servers and the server blade, a permission list of boot program 
servers authorized for each server blade in a server blade chassis. 
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8. (currently amended) A system for managing a secure network boot of a server blade, 
the server blade being in a blade chassis that has multiple server blades, the blade chassis 
including a switching means allowing the server blade to communicate with a network, the 
system comprising: 

means for storing a list of trusted management servers in a management module on a 
server blade: 

means for broadcasting a Dynamic Host Configuration Protocol (DHCP) DISCOVER 
request to a network of DHCP servers: 

m e ans for broadcasting a - requ e st - for a boot - program from a oervor blade to a network of 
management s e rvers; 

means for receiving, at a switching means associated with the server blade, a DHCP 
OFFER message Ifaat is responsive to the DHCP DISCOVER request, wherein the DHCP 
OFFER message contains Internet Protocol (TP) addresses of responding DHCP servers, a 
Dynamic IP address with lease information, and a list of Pre-boot eXecution Environment (PXK> 
Boot Servers that can be contacted by the server blade to download a boot program, and wherein 
the DHCP Qi*t f .ttK. comes from a responding DHCP server on the network of DHCP servers: 

moono for r e o e iving a r e opono e- to - th e- r e qu e st - for - the boot program at a swit c hing m e an s 
associat e d with the s e rv e r blade, th e response being from a rooponding management s e rv e r on 
the n e twork of manag e ment s e rv e rs, th e respons e containing dir e ctions to a boot program s e rv e r ^ 

means for comparing an identity of the responding [[management]] DHCP server with 
the list of trusted [[management]] DHCP servers in the management module on the server blade; 
and 

means for, [[upon]] in response to verifying that the responding [[management]] DHCP 
server is on the list of trusted [[management]] DHCP servers, transmitting th e r e opono e from th e 
responding - management corvor to th e o e rvor blado permitting the DHCP OFFER message to pass 
through to the server blade via an Ethernet switch that is coupled to the server blade, and 
downloading a boot program from a boot program server specified by the responding 
[[management]] DHCP server. 

9. (currently amended) The system of claim 8, further comprising: 
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means for, [[upon]] in response to determining that the responding [[management]] 
DHCP server is not on the list of trusted [[management]] DHCP server$, blocking the transmittal 
of the response from the responding [[management]] DHCP server through the Ethernet switch 
to the server blade. 

10. (currently amended) The system of claim 9, further comprising: 

means for, [[upon]] in response to determining that the responding [[management]] 
DHCP server is not on the list of trusted [[management]] DHCP servers, generating an alert to a 
designated administrator server of a presence of an unauthorized [[management]] DHCP server 
on the network of [[management]] DHCP servers. 

U. (cancelled) 

12. (currently amended) The system of claim [[11]] 9> wh e r e in th e means for oomporing 
configures tfa e Eth e rn e t switch to p e rform Lay e r 3 pack e t filt e ring to id e ntify Pr e boot Execution 
Environment/Bootstrap Protocol (PXE/BootP) troffiorwher e in Layer 3 io a n e twork layer of the 
s e v e n laverp of tho Open Svotom Interconnection (OSD mode l wherein none of the steps 
described in claim 1 causes any code changes to firmware in the server blade . 

13. (original) The system of claim 8, further comprising: means for, upon determining that the 
responding management server is not on the list of trusted management servers, downloading a 
boot program from a known trusted boot server in a secure local area network (LAN). 

14. (original) The system of claim 8, further comprising: 

means for managing different types of boot program servers available to the server blade 
by maintaining, in an information technology services organization logically oriented between 
the different types of boot program servers and the server blade, a permission list of boot 
program servers authorized for each server blade in a server blade chassis. 

15. (currently amended) A computer program product, residing on a computer usable 
medium, for managing a secure network boot of a server blade, the server blade being in a blade 
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chassis that has multiple server blades, the blade chassis including a switching means allowing 
the server blade to communicate with a network, the computer program product comprising: 

program code for storing a list of trusted management servers in a management module 
on.a server blade; 

program code for broadcasting a Dynamic Host Configuration Protocol (DHCP) 
DISCOVER request to a network of DHCP servers; 

program oodo for broad s osting a requ e st for a boot program from a oorvor blado to a 
n e twork of management serv e rs; * 

program code for receiving, at a switching means associated with the server blade, a 
DHCP OFFER message that is responsive to the DHCP DISCOVER request, wherein the DHCP 
OFFER message contains Internet Protocol (IP} addresses of responding DHCP servers, a 
Dynamic IP address with lease information, and a list_of Pre-boot eXecution Environment fPXE^ 
Boot Servers that can be contacted bv the server blade to download a boot program, and wherein 
the DHCP OFFER comes from a responding DHCP server on the network of DflCP server?; 

program ood e for r e oeiving a r e cponc e to th e re qu e st for th e boot program at a owitohing 
means associated with the -server blade, tho roopona e being from a rooponding manag e ment 
s e rver on the network of manag e ment s e rv e rs, th e r e spons e ^oftteijijag - dit e clions to a boot 
program serv e r; 

.program code for comparing an identity of the responding [[management]] DHCP server 
with the list of trusted [[management]] DHCP servers in the management module on the server 
blade : and 

program code for, [[upon]] in response to verifying that the responding [[management]] 
DHCP server is on the list of trusted [[management]] DHCP servers, transmitting th e response 
from the r e sponding manag e ment s e rver to the s e rv e r bl ade permitting the DHCP OFFER 
message to pass through to the server blade via an Ethernet switch that is coupled to the server 
blade, and downloading a boot program from a boot program server specified by the responding 
[[management]] DHCP server. 

16. (currently amended) The computer program product of claim 15, further comprising: 

program code for [[upon]] in response to determming that the responding 
[[management]] DHCP server is not on the list of trusted [[management]] DHCP servers, 
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blocking the transmittal of the response from the responding [[management]] DHCP server 
through the Ethernet switch t o the server blade. 

17. (currently amended) The computer program product of claim 1 6, further comprising: 

program code for, [[upon]] in response to determining that the responding 
[[management]] DHCP server is not on the list of trusted [[management]] DHCP servers, 
generating an alert to a designated administrator server of a presence of an unauthorized 
[[management]] DHCP server on the network of [[management]] DHCP servers. 

IS. (cancelled) 

19. (currently amended) The computer program product of claim [[18]] 15, wh e rein th e 
comparing step is p e rformed by configuring - th e- Ethernet owitoh to perform Layer 3 paokot 
filt e ring to id e ntify Pre boot Ex e cution Environm e nt/Bootstrap Protocol (PXE/BootP) traffic, 
wherein - Layer 3 io a network lay e r of th e- sovon - layors of th e Op e n System Interconnection (OSI) 
H*ede l wherein none of the steps described in claim 1 causes any code changes to firmware in the 
server blade , 

20. (original) The computer program product of claim 15, further comprising: 

program code for, upon detej^Daining that the responding management server is not on the 
list of trusted management servers, downloading a boot program from a known trusted boot 
server in a secure local area network (LAN). 

2 1 . (original) The computer pro gram product of claim 1 5, further comprising: 

program code for coordinating different types of boot program servers available to the 
server blade by maintaining, in an information technology services organization logically 
oriented between the different types of boot program servers and the server blade, a permission 
list of boot program servers authorized for each server blade in a server blade chassis. 

22. (new) The method of claim 7, wherein the information technology services organization 
is an Information Technology (IT) services organization that manages various types of Pre-boot 
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eXecution Environment (PXB) deployment servers, and wherein the IT services organization 
enables a same IT service organization assigned systems administrator to manage the various 
types of PXB deployment servers, to maintain permission lists for each PXE server type, to 
monitor a network for a presence of unauthorized PXE servers that are not authorized, by the IT 
services organization, to support the client computer, and to shut down network ports, for 
unauthorized PXE servers, in the client computer. 

23. (new) The system of Claim 14, wherein the information technology services 
organization is an Information Technology (IT) services organization that manages various types 
of Pre-boot eXecution Environment (PXE) deployment servers, and wherein the IT services 
organization enables a same IT service organization assigned systems administrator to manage 
the various types of PXE deployment servers, to maintain permission lists for each PXE server 
type, to monitor a network for a presence of unauthorized PXE servers that are not authorized, by 
the IT services organization, to support the client computer, and to shut down network ports, for 
unauthorized PXE servers, in the client computer. 

24. (new) The computer program product of Claim 21, wherein the information technology 
services organization is an Information Technology (IT) services organization that manages 
various types of Pre-boot execution Environment (PXE) deployment servers, and wherein the IT 
services organization enables a same IT service organization assigned systems administrator to 
manage the various types of PXE deployment servers, to maintain permission lists for each PXE 
server type, to monitor a network for a presence of unauthorized PXE servers that are not 
authorized, by the IT services organization, to support the client computer, and to shut down 
network ports, for unauthorized PXE servers, in the client computer. 
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